Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
File:                     ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa (raw, json)
Hash identifier:          9Z4Vr4yuC6G+zOaYAgVLoeG66QkUgTGmRSgY2RQr2D4=
Subject key identifier:   23:4A:72:1D:63:03:3D:D0:5E:12:3E:83:71:56:AD:B9:4A:AD:9A:71
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F43285848265FEDB40D133D28F1A48C00
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        2607:1c0:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:ed:b4:0d:13:3d:28:f1:a4:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=3fdb32ce-e5e2-45d9-9224-0795d4f00ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:85:06:88:e6:f4:07:5b:2f:0c:18:fa:7c:
                    62:6a:ad:a9:c1:fa:42:40:39:95:4a:8a:58:cc:7f:
                    d4:85:59:b5:9f:3f:e5:d4:3a:ff:b7:3b:cc:75:e6:
                    5b:96:fb:a2:08:13:42:a5:72:fb:4c:ef:c0:24:72:
                    f1:71:2d:d7:dc:cc:82:90:51:30:d8:19:8b:57:36:
                    9e:72:e8:7e:b8:8d:86:b7:1e:28:db:59:cb:1a:94:
                    d4:a4:e1:98:aa:af:be:3a:47:15:b5:52:0b:f3:2d:
                    27:51:54:b0:8a:84:c1:8f:99:51:43:60:27:19:4c:
                    89:9e:23:ac:c0:36:9e:86:f1:81:fe:ba:a5:77:ab:
                    2f:1c:be:4e:f3:05:e0:8f:e4:5b:3f:67:61:67:86:
                    85:d3:f0:3c:fb:60:8e:8a:71:77:67:a7:30:00:c6:
                    1d:4a:24:f0:84:1e:fb:0e:a0:11:96:93:ba:a5:4a:
                    ab:42:1a:9b:d5:d1:bb:98:da:2f:2b:16:f1:6c:a2:
                    5b:76:0b:a8:a7:76:f5:39:a8:7a:d2:91:e4:ae:ac:
                    ae:2b:e9:f7:05:9b:38:e3:2e:06:65:ea:7c:4f:75:
                    d7:df:90:23:12:24:39:71:89:0a:0e:ae:51:43:98:
                    5b:08:f6:20:ae:78:e4:65:b5:c1:fb:cf:19:ce:40:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:72:1D:63:03:3D:D0:5E:12:3E:83:71:56:AD:B9:4A:AD:9A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:de:d3:05:37:43:23:54:8e:1a:b9:20:d5:c2:b6:5d:14:6d:
         a2:a4:a2:58:1d:69:3b:58:3d:b2:c8:69:f9:c6:cb:83:f2:81:
         88:4c:43:32:83:3d:36:d5:04:24:5f:eb:33:6b:fa:56:a8:2e:
         07:5c:1c:b1:10:db:89:85:cd:d3:bb:1a:d4:38:df:2b:e3:49:
         d5:eb:6f:5c:7d:64:9f:ad:be:ba:21:30:2d:33:d4:92:a9:8d:
         a2:e4:5d:f5:89:05:20:af:ff:5a:d6:68:19:63:ae:6b:25:94:
         41:0e:80:02:de:66:da:92:9f:2e:b9:5d:04:67:f0:fa:31:af:
         13:03:b4:47:c0:83:02:d8:ec:c2:74:46:08:11:4a:f9:19:52:
         1e:f1:b9:65:a0:fc:9f:dc:d3:ff:76:b3:98:ed:4c:f6:e8:b7:
         4e:4c:b8:a6:c7:64:59:f2:26:74:97:85:fb:df:55:df:37:17:
         cc:6b:56:19:76:12:10:76:ed:aa:e7:e1:85:d8:c2:e2:67:c5:
         85:54:ce:a6:b8:3e:63:5f:e7:96:ce:e2:fe:9e:59:aa:37:60:
         b4:6e:49:39:0f:3b:5d:aa:48:3e:d7:29:4a:6c:cc:3a:68:b7:
         65:8a:26:c0:db:a9:45:66:2f:3a:62:27:4f:20:ad:b0:f3:51:
         32:17:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:31 2025 by rpki-client